
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          xTeVwEN45Tbdrk726BPBGAEhgVRxdwv9Q6glGJL5p58=
Subject key identifier:   DA:98:F0:3B:65:57:0A:1F:FD:DD:75:33:11:2F:AD:64:95:11:9B:81
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2793
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          2741
Signing time:             Sun 02 Nov 2025 15:41:06 +0000
Manifest this update:     Sun 02 Nov 2025 15:41:06 +0000
Manifest next update:     Sun 09 Nov 2025 15:41:06 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: NVgtEj1zjhECd1WAK9cnYraCU9z5JtnUZKhPQx5Ax+s=)
                          2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: YRyAIa+9kqjeJON/+m339DSD36eJAdvbC6dlw8cArb0=)
                          3: 79393030926D11F0B792FC45C4F9AE02.roa (hash: LAJwoHFi1knzvwPobu0BMg/1M9+So7vYWniJ7ToNNUE=)
                          4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zljvCYtPHGxkTjF0cJrDQGngJEaHA+QSXJeZL2Snd8A=)
                          5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 5DmpgkEHXaDkkR9mgpZabmssGePTrFoLLGp9YTKRdHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:41:05 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10131 (0x2793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Nov  2 15:41:06 2025 GMT
            Not After : Nov  9 15:41:06 2025 GMT
        Subject: CN=69077b92-b24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:34:5c:04:ac:27:e5:2f:5a:5d:58:36:85:
                    a6:5a:a0:74:39:f5:ad:c2:ba:84:48:e1:e4:57:95:
                    e5:06:e3:15:70:6a:f5:54:58:1e:4a:b5:25:80:80:
                    7a:d3:95:45:f7:b7:6a:98:06:ea:22:98:f2:ce:e9:
                    92:d7:33:0b:3f:ab:57:38:69:f6:97:3c:11:da:d4:
                    69:cb:eb:28:3e:10:35:d8:6c:a7:d6:39:d3:4f:f0:
                    c7:05:d4:1d:c0:bf:9d:ce:65:da:3d:1e:d4:44:f5:
                    9a:ac:d0:07:e5:1b:50:89:05:6d:39:b9:16:ca:c4:
                    13:56:89:39:17:a5:25:9e:b1:b3:08:4d:87:1f:68:
                    ea:e0:be:dc:ff:ec:e7:a9:07:73:48:d8:dc:e5:5c:
                    59:12:7a:34:5d:80:01:5f:c6:25:0f:f3:e7:f1:c4:
                    ae:87:83:13:6f:aa:00:82:b4:41:e9:6e:0f:21:53:
                    fa:52:6e:80:b4:23:be:52:ca:cf:c0:e8:22:d0:35:
                    c2:b1:3b:89:4f:58:14:ab:81:c8:ad:1d:24:72:1b:
                    0d:4d:46:85:27:5c:e5:74:11:7a:b4:ee:a6:ba:39:
                    9a:9b:88:03:6d:82:c9:18:bf:19:48:bc:3f:86:a4:
                    5f:e4:11:7b:88:81:61:91:17:cc:1a:29:2f:61:89:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:F0:3B:65:57:0A:1F:FD:DD:75:33:11:2F:AD:64:95:11:9B:81
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:7c:95:ce:4b:4f:d9:ea:fd:1c:bb:18:5c:6c:13:e8:67:
         10:37:b4:c9:39:42:82:ce:68:38:70:7b:b5:47:1b:21:6f:f8:
         34:e1:7c:f5:c6:98:3c:e8:dd:f2:97:51:c7:d9:6c:15:2e:bb:
         5d:0f:63:da:87:fc:84:79:2a:64:cb:61:fd:fa:2e:66:30:2a:
         80:b3:69:44:ec:4f:13:85:3b:a6:70:d0:dd:df:45:1c:7c:7d:
         fe:7e:70:53:1f:83:44:4d:eb:3b:8f:b2:5e:7e:19:a5:32:3a:
         cb:17:54:ab:7e:9a:72:79:7c:26:a4:38:60:1f:63:21:ce:fd:
         f8:6d:5d:70:9b:72:d4:b0:f6:8e:0d:f5:1c:89:6a:57:54:77:
         58:05:65:b4:54:43:52:f1:3c:05:99:4c:f8:27:12:b2:25:62:
         b3:38:c2:d6:af:f0:0c:29:8a:eb:be:ab:3e:9c:07:e7:d0:13:
         2c:80:3d:dc:9b:f9:ce:f8:e2:ee:96:e9:af:5e:cd:0f:66:40:
         66:e5:0e:59:ee:9f:74:dc:ae:97:33:3e:70:02:b0:d5:42:06:
         9f:3e:0a:ba:e6:1b:41:cb:81:99:20:f5:05:0f:ab:bb:b4:25:
         9f:02:0e:d6:c8:98:77:34:0f:f2:19:4f:1e:34:47:07:64:94:
         b2:60:d9:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJ5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE
MEFCOTRCRTUwHhcNMjUxMTAyMTU0MTA2WhcNMjUxMTA5MTU0MTA2WjAYMRYwFAYD
VQQDEw02OTA3N2I5Mi1iMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3x80XASsJ+UvWl1YNoWmWqB0OfWtwrqESOHkV5XlBuMVcGr1VFgeSrUlgIB6
05VF97dqmAbqIpjyzumS1zMLP6tXOGn2lzwR2tRpy+soPhA12Gyn1jnTT/DHBdQd
wL+dzmXaPR7URPWarNAH5RtQiQVtObkWysQTVok5F6UlnrGzCE2HH2jq4L7c/+zn
qQdzSNjc5VxZEno0XYABX8YlD/Pn8cSuh4MTb6oAgrRB6W4PIVP6Um6AtCO+UsrP
wOgi0DXCsTuJT1gUq4HIrR0kchsNTUaFJ1zldBF6tO6mujmam4gDbYLJGL8ZSLw/
hqRf5BF7iIFhkRfMGikvYYmccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqY8Dtl
Vwof/d11MxEvrWSVEZuBMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB
Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ
X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAu1HyVzktP2er9HLsYXGwT6GcQN7TJOUKCzmg4cHu1Rxshb/g04Xz1
xpg86N3yl1HH2WwVLrtdD2Pah/yEeSpky2H9+i5mMCqAs2lE7E8ThTumcNDd30Uc
fH3+fnBTH4NETes7j7JefhmlMjrLF1SrfppyeXwmpDhgH2Mhzv34bV1wm3LUsPaO
DfUciWpXVHdYBWW0VENS8TwFmUz4JxKyJWKzOMLWr/AMKYrrvqs+nAfn0BMsgD3c
m/nO+OLulumvXs0PZkBm5Q5Z7p903K6XMz5wArDVQgafPgq65htBy4GZIPUFD6u7
tCWfAg7WyJh3NA/yGU8eNEcHZJSyYNk8
-----END CERTIFICATE-----
Generated at Tue Nov  4 12:40:30 2025 by rpki-client